Telebirr SMS Spoofing Fraud
How fraudsters spoof Telebirr SMS payment notifications to trick merchants.
Verify a Telebirr receipt nowHow Telebirr SMS spoofing works
When you receive a Telebirr payment, Ethio Telecom sends an SMS notification to your phone. Fraudsters exploit this by sending fake SMS messages that appear to come from Telebirr's short code. The fake SMS contains a made-up transaction reference number and amount, making it look like a real payment notification. If you trust the SMS without verifying, you release goods for a payment that never happened.
Why SMS sender IDs can be spoofed
SMS sender IDs (the 'from' field) are not cryptographically verified by most telecom networks. Using SMS gateway services or SIM box setups, a fraudster can send messages with any sender ID, including Telebirr's official short code. The message arrives in the same conversation thread as real Telebirr notifications, making it nearly impossible to distinguish from a genuine message.
- Sender IDs are not authenticated by the SS7 protocol
- Online SMS gateway services allow custom sender IDs
- The fake SMS appears in the same thread as real notifications
- Only verifying the reference number against Telebirr's system can confirm the payment
How to protect your business
Never release goods based on an SMS alone. Always verify the transaction reference through cheki before accepting a payment. Train your staff to verify every Telebirr payment, especially during busy hours when it's tempting to skip verification.
- Verify every transaction reference through cheki or the Telebirr app
- Do not trust SMS notifications alone, even if they look genuine
- Train delivery staff to verify before handing over goods
- Set up batch verification at end of day to catch any missed verifications
- Report SMS spoofing to Ethio Telecom and the cybercrime unit
Frequently asked questions
What is Telebirr SMS spoofing?
SMS spoofing is when a fraudster sends a text message that appears to come from Telebirr's official SMS number, notifying you of a payment that never happened. The message looks identical to a real Telebirr payment notification but no actual transaction occurred.
How can I tell if a Telebirr SMS is fake?
You cannot reliably tell from the SMS alone because the sender ID can be spoofed. The only way to confirm a payment is to verify the transaction reference through cheki or the official Telebirr app. If the reference number doesn't exist in Telebirr's system, the SMS was fake.
Is SMS spoofing common in Ethiopia?
SMS spoofing fraud has been reported in Ethiopia, particularly targeting small merchants and delivery services who rely on SMS notifications to confirm payments. As Telebirr grows, this type of fraud is expected to increase. Always verify through the endpoint, not the SMS.
Verify a Telebirr receipt now
Open cheki